Abstract

The resilience of a system consists in its capability to maintain a safe and satisfactory mission, in its operational environment, while adapting to changing conditions (foreseen or unforeseen events, losses, failures,...) and mitigating the risk of contingencies. To guarantee the success of the ATV future missions (from ATV2, Johannes Kepler), the operational teams at ATV-CC(ATV Control Center), with the help of the vehicle designers, have built dedicated processes, developed particular tools and set specific advanced training right from the earliest preparation phase. In order to be compliant with strong safety requirements (due to the proximity of and interfaces with the ISS), operational teams have to prepare strategies balancing total automation versus human reaction, or training (at least, one procedure for each foreseen case) versus adaptation. Combining system engineering principles and lesson learnt from ATV Jules Verne mission, the Vehicle Team (VET) at ATV-CC challenges the improvement of the global system resilience through several means (ground and on-board alarms, specialized procedures, specific displays,...) depending on contingencies level, for next missions. The paper describes the strategies (in term of processes and tools) set up by the Vehicle Engineers Team, in accordance to safety requirements, interfaces with the international partners and ATV-CC rules to ensure the ATV operations.